Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: MZa9n7g7tCTD7tYAvF08NMH6/Kj8FDJNIKuuEb4Xevc=
Subject key identifier: 2E:84:B4:EA:CF:1D:B8:7B:0C:CD:F3:A3:57:3A:D0:B0:65:7E:F8:66
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019FA8993612D763089C84553E0A039BA9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 10B7
Signing time: Tue 28 Jul 2026 12:00:40 +0000
Manifest this update: Tue 28 Jul 2026 12:00:40 +0000
Manifest next update: Wed 29 Jul 2026 12:00:40 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: PHY4iotZd4edKHgxCvVxvuZ8/6U/BQjBO36Z+NdPI+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:36:12:d7:63:08:9c:84:55:3e:0a:03:9b:a9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Jul 28 12:00:40 2026 GMT
Not After : Jul 29 12:00:40 2026 GMT
Subject: CN=2e84b4eacf1db87b0ccdf3a3573ad0b0657ef866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:31:15:69:9b:71:97:97:7f:07:17:2c:5c:
cb:03:da:6e:ab:f7:68:55:a1:51:ab:e1:9d:57:69:
ec:0a:df:52:6b:21:d7:7a:18:f1:26:2c:72:39:78:
9c:c9:bc:9b:cc:60:6f:fc:83:44:fd:27:20:95:e6:
d7:64:54:d6:32:c8:72:bf:28:2d:cd:5f:f0:55:82:
cc:7a:07:4c:fa:8f:d9:ed:59:55:6a:e1:75:52:57:
44:92:cb:ff:09:ea:81:06:3a:76:46:0c:6e:65:a0:
06:60:f2:17:d0:83:26:7c:a5:54:cf:9a:61:62:73:
07:4b:1a:e6:9a:6b:f1:bd:bc:ec:4d:3a:b5:f6:f2:
62:71:82:a0:1e:87:a3:b4:68:56:09:ba:38:fe:fd:
af:85:46:98:5f:b9:ec:84:93:f9:d2:d0:27:d9:33:
4b:38:d0:d1:ca:f1:65:8f:45:c0:ec:d1:62:4a:e9:
e7:82:35:39:3a:6b:92:51:68:8d:fd:d6:a7:44:43:
28:d4:2f:b4:c8:f1:a0:04:80:75:04:4d:08:15:b0:
2f:2b:bc:73:a3:47:7a:cd:27:48:63:32:81:e5:e4:
4b:ba:8f:7d:44:c2:9f:b5:be:4b:bc:75:90:da:53:
3e:7c:f7:09:87:62:bc:11:e4:29:01:f5:b1:be:9c:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:B4:EA:CF:1D:B8:7B:0C:CD:F3:A3:57:3A:D0:B0:65:7E:F8:66
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:45:54:82:bd:43:18:b1:cd:c7:6b:a4:93:f4:fb:73:2f:7a:
47:9d:6c:8b:73:43:ec:cc:2c:9f:94:87:9d:d9:50:c0:e5:1b:
c0:ba:64:5f:7f:42:34:90:83:d5:f4:dc:af:84:89:25:ed:e0:
10:c8:96:fb:f4:07:cd:d6:b0:6b:bd:9f:19:3f:4a:fa:25:e8:
38:3b:d0:10:a9:15:09:80:ac:04:fb:44:cf:63:4a:0d:3f:66:
ea:fc:d3:30:3a:55:76:3f:0f:f6:5a:d4:ad:8a:68:05:73:a3:
0f:a0:7c:a8:d5:3c:b9:dd:10:8d:68:b5:de:9b:75:4e:ae:1a:
df:c6:33:30:11:28:b6:13:42:10:63:cd:85:e2:68:68:19:aa:
3b:b6:64:04:85:a2:89:5e:5f:a2:59:35:84:07:b5:db:f3:e6:
c0:1d:7e:c2:14:a5:ff:20:40:c5:02:51:76:b3:90:8a:3b:ae:
90:43:30:dd:cd:03:bb:96:52:d3:6a:78:ab:e3:0c:cb:cb:6e:
8a:a4:68:86:e0:98:4c:29:18:b8:2c:b0:47:d1:90:d8:52:4d:
ba:ee:f1:9a:a2:07:3d:08:09:f8:95:1d:be:94:e4:7c:c5:75:
e8:37:5c:3d:14:fb:ef:d6:fc:4b:49:1c:8f:ba:a7:5d:e3:45:
3d:0d:f8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:15 2026 by rpki-client